Paper/Archive/CVE-2020-22079

CVE-2020-22079

mitre — Stack-based buffer overflow in Tenda AC-10U AC1200 Router US_AC10UV1.0RTL_V15.03.06.48_multi_TDE01 allows remote attackers to execute arb…

EPSS 4%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (NVD)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 91.1.911 × 2018.2 No public exploit+100.0 SSVC exploitation: unknown+100.0

Description · from the CVE record

Stack-based buffer overflow in Tenda AC-10U AC1200 Router US_AC10UV1.0RTL_V15.03.06.48_multi_TDE01 allows remote attackers to execute arbitrary code via the timeZone parameter to goform/SetSysTimeCfg.

Affected

ProductAffectedFixed inSource

n/an/a–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refcwe.mitre.org/data/definitions/121.html refgithub.com/1sd3d/Tendown/tree/master/PoCs/Auth/bof11 refgithub.com/Lyc-heng/routers/blob/main/routers/stack1.md